News for hackers. Stuff that matters.

rhd

Re:Sandboxes won't save you from OpenClaw on Wednesday February 25, 2026 @05:12PM (#47158769)
What if it's convinced to resolve the matter on your behalf, against your favor while it was acting autonomously?
Re:Casio F91w at 5KM underwater – watches of espionage on Friday January 31, 2025 @08:37AM (#42887507)
This video might be of interest to you-

https://www.youtube.com/watch?v=iOT8XU1ss3E (Do Oil-Filled (Hydro Mod) Watches Actually Dive Deeper?)

Re:Regex character "$" doesn't mean "end-of-string" on Wednesday March 20, 2024 @06:52AM (#39764831)
chatgpt-4:

^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$

https://chat.openai.com/share/696f7046-7f43-4331-b12b-538566...

chatgpt-3.5:

^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$

https://chat.openai.com/share/aaa09ae8-3fd9-4df7-a417-948436...

Yep, they're using it for malware delivery as well- not uncommon to find Dropper's that download additional stages of the malware from discord.
Re:Pysentation – The Python Presentation on Friday September 01, 2023 @09:34PM (#37357886)
Chat gpt learning cutoff
I know CyberArk PAS has this feature, and there are others. https://docs.cyberark.com/PAS/11.6/en/Content/PASIMP/Configu...
I've once used Selenium to run javascript in the webpage to steal a few dynamic tokens required by the sites API to reuse in my more well-trodden python-requests workflow.
Re:Reverse Engineering a Mysterious UDP Stream in My Hotel on Thursday February 23, 2023 @08:05PM (#34919257)
Sounds like a great CTF challenge, will have to explore
Re:Reverse engineering an e-paper pricetag on Friday February 10, 2023 @11:30AM (#34741877)
Here's an example in Michigan's law:

The Shopping Reform and Modernization Act, or Scanner Law, requires that most items on store shelves be clearly displayed with the price; by signage, electronic reader, price sticker, or any other method that clearly and reasonably conveys the price to a consumer in the store at the place where the item is located. If an automatic checkout system (scanner) charges you more than the displayed price of an item, and:

the transaction has been completed, and you have a receipt indicating the item purchased and the price charged for it; Then:

You must notify the seller that you were overcharged, within 30 days of the transaction, either in person or in writing. Within two days of receiving your notice, the seller may choose to refund you the difference between the amount charged and the price displayed plus a "bonus" of ten times the difference, with a minimum of $1.00 and a maximum of $5.00. If the seller does not pay you both the refund and the bonus, you may bring a lawsuit to recover your actual damages or $250.00, whichever is greater, plus reasonable attorney fees up to $300.00. You may instead file a complaint in a small claims court without an attorney.

https://www.michigan.gov/ag/consumer-protection/consumer-ale...

Re:An Accident at SpaceX on Tuesday October 18, 2022 @03:02PM (#33252291)
Is SpaceX a covered entity providing health care? If not, HIPAA is not at issue.
There could be privacy concerns where Apple isn't the party using the data, but has allowed a third party access unintentionally.

I don't know if this would be possible given the limited information currently available, but an example may be:

User attempts to browse anonymously through the use of A VPN, obscuring their residential IP. Website, or third party analytics on a website generate unique links and embed them in QR codes hidden on the page. A twist on tracking pixels. Browser requests, and caches image containing QR code on disk. Later, after user has disconnected from VPN their OS indexes images on the filesystem (for search purposes, or whatever, parses the QR code and requests the url contained. Malicious site/analytics firm now has additional data point (residential IP, not obscured by VPN) to correlate against.

There's also the remote potential that the QR code parsing/request functionality could have vulnerabilities. The behavior known doesn't indicate that, but it might result in exploitation with less human interaction if they are found.

Re:Rethinking indoor air chemistry on Tuesday September 06, 2022 @02:51PM (#32741488)
I went down a similar journey over the last couple years (CO2, VOC, PM1.0/2.5/10 sensors). In my apartment I sit around zero for particulate with windows closed. I jump up significantly with windows open unfortunately (for my allergies) in the midwest.

I do wish my AC/Heat had more air exchange, similar to your space my CO2 levels rise dramatically after an hour or two of occupation with windows closed.

Re:WordPress’ market share is shrinking on Thursday May 12, 2022 @07:33AM (#31352446)
And SOC/CSIRT folks. A staggering amount of incidents involve an external wordpress install used as free real estate by threat actors in some way (e.g. phishing kit, malware infra).
Re:WLED Arduino WiFi LED Controller on Tuesday January 18, 2022 @04:26PM (#29986099)
I think probably something like these: https://www.amazon.com/dp/B01AG923GI?psc=1&ref=ppx_yo2_dt_b_...

I know a lot of people use them punched through maps, for live METARS displays

Re:WLED Arduino WiFi LED Controller on Monday January 17, 2022 @03:16PM (#29971217)
This project is great, I've used it in a number of 3d printed lamps (I did not design, just printed and assembled): Hex wall feature: https://www.youtube.com/watch?v=k58HUUgFhOw Fiber lamp: https://www.youtube.com/watch?v=lGlQDPNpxps Canister lamp: https://www.youtube.com/watch?v=OdRT6GtUGSo
Re:Show HN: I wrote a book about Go on Wednesday March 24, 2021 @05:59PM (#26573528)
Hi,

It's probably a combination of young domain, and associated IPs blocked from mail.

Check on Cisco Talos https://talosintelligence.com/ Submit ticket: https://talosintelligence.com/reputation_center/support#repu...